Add Reflexive Arcade Installer detection (fixes #102)

This commit is contained in:
Matt Nadareski
2025-09-08 08:44:18 -04:00
parent 846000cb3f
commit 5c7ea889be
3 changed files with 31 additions and 1 deletions

View File

@@ -1,4 +1,3 @@
using System;
using BinaryObjectScanner.Interfaces;
using SabreTools.Matching;
using SabreTools.Serialization.Wrappers;

View File

@@ -0,0 +1,30 @@
using BinaryObjectScanner.Interfaces;
using SabreTools.Serialization.Wrappers;
namespace BinaryObjectScanner.Packer
{
/// <summary>
/// Reflexive Arcade Installer
/// </summary>
public class ReflexiveArcadeInstaller : IExecutableCheck<PortableExecutable>
{
/// <inheritdoc/>
public string? CheckExecutable(string file, PortableExecutable exe, bool includeDebug)
{
// Get the .data/DATA section strings, if they exist
var strs = exe.GetFirstSectionStrings(".data") ?? exe.GetFirstSectionStrings("DATA");
if (strs != null)
{
// <see href="https://www.virustotal.com/gui/file/33b98b675d78b88ed317e7e52dca21ca07bd84e79211294fcec72cab48d11184"/>
if (strs.Exists(s => s.Contains("ReflexiveArcade")))
return "Reflexive Arcade Installer";
// <see href="https://www.virustotal.com/gui/file/33b98b675d78b88ed317e7e52dca21ca07bd84e79211294fcec72cab48d11184"/>
if (strs.Exists(s => s.Contains("Reflexive Arcade")))
return "Reflexive Arcade Installer";
}
return null;
}
}
}

View File

@@ -170,6 +170,7 @@ Below is a list of executable packers detected by BinaryObjectScanner. The three
| PECompact | Yes | No | No | |
| PEtite | Yes | No | No | |
| PKLITE32 | Yes | No | No | |
| Reflexive Arcade Installer | Yes | No | No | |
| Setup Factory | Yes | No | No | |
| Shrinker | Yes | No | No | |
| Smart Install Maker | Yes | No | No | |